Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          g0gmTkC9+MHKV9Wizwg2DfYx1TlgOAR+3gDebCWFZ7Y=
Subject key identifier:   E9:3B:D7:71:29:1E:35:63:2C:7A:9A:F6:14:AB:F6:18:F8:0E:C0:5C
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       01A112971907C86EA711A39DB6D1FA6668A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          1A9F
Signing time:             Tue 06 Oct 2026 19:00:54 +0000
Manifest this update:     Tue 06 Oct 2026 19:00:54 +0000
Manifest next update:     Wed 07 Oct 2026 19:00:54 +0000
Files and hashes:         1: Rxu6PY6T12eD6Vlw9k60_83v9Nc.roa (hash: j/YK/yQpe4IKOS3k5YPKzOKh1qWi6WCqC8bqntTBlxY=)
                          2: VFU37iQljI79t35JlR-w1IteaQw.roa (hash: J5t9v+o/rmxrY3dLqpHoI3srOK2b8Gw8LuwtD186cUY=)
                          3: gPtYr61h83pA7-mt902KElGDuI0.roa (hash: Kfj49mH4lsVszd4rTCsS6tC3nnBrcy/t3kH2S5AxGGo=)
                          4: nUBRGA1FEWK-usieosyBaTq-H8Q.roa (hash: vDMG9fme7VB9AauE97OnMRGk4k7A0gMGf6ktOmefSMw=)
                          5: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: uy3eVchyiKmwmYKwW4gG/MViKFJ6O8SRtZHTgLu96vM=)
                          6: sixxThEQTX1zUHOzyF4MB92-RaY.roa (hash: secsUzL3O2X6Ac6rYvaZ+cU3vmetNixtbbwwWKOjrmw=)
                          7: uWkEc-fbIJqw99dNiiEwAeVlWfM.roa (hash: 1DSbIjvJqT3rylhutdS0OLOYTOnrBsAi7+g/hYhs1tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:97:19:07:c8:6e:a7:11:a3:9d:b6:d1:fa:66:68:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Oct  6 19:00:54 2026 GMT
            Not After : Oct  7 19:00:54 2026 GMT
        Subject: CN=e93bd771291e35632c7a9af614abf618f80ec05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5a:86:d8:c5:70:75:bf:61:1a:d3:c6:d4:89:
                    05:e1:88:dc:7d:36:8c:c5:0f:31:02:44:56:0a:2d:
                    15:bd:0f:14:55:a6:30:b0:be:b5:44:b4:29:a3:5f:
                    a9:92:e9:95:5c:1b:5f:5e:1a:fe:d0:a8:85:69:ee:
                    e1:76:b1:3a:f5:5c:28:c9:48:b0:a2:9d:95:fc:bd:
                    cc:55:f7:af:46:b6:0d:17:15:24:54:50:53:1d:06:
                    cc:26:ad:83:f3:b1:53:60:20:b0:38:95:20:29:c9:
                    f7:e4:88:82:66:97:92:95:a2:a4:ef:2d:47:2a:e3:
                    1b:15:58:36:ae:0b:27:39:ba:ff:9b:0e:24:9e:ba:
                    e4:9b:08:84:23:96:2b:6f:7e:14:84:76:61:13:6f:
                    b3:4e:d9:a3:cc:f5:bb:ab:bf:78:fb:c2:99:d6:df:
                    61:b9:53:18:c4:23:08:54:08:1b:bc:e1:fe:75:70:
                    be:57:0e:0e:8c:c8:ec:b0:b8:11:26:ca:58:49:81:
                    19:10:09:eb:1d:7e:d5:cb:47:a0:3b:83:ac:dd:c2:
                    12:57:28:5e:8a:b3:dc:e8:48:b8:8b:8d:50:7b:fd:
                    bd:67:e5:f3:56:1c:05:dd:c4:3b:4c:fc:86:00:2f:
                    68:8f:c1:52:be:77:73:9c:50:cd:5c:b3:5a:f7:3e:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3B:D7:71:29:1E:35:63:2C:7A:9A:F6:14:AB:F6:18:F8:0E:C0:5C
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:94:46:fd:d6:20:a6:93:3d:9f:17:84:9d:02:d4:e4:c7:09:
         12:4d:82:36:d4:36:0f:04:a0:64:7c:01:21:8b:aa:40:6b:65:
         ce:de:5f:5e:2f:ee:65:a9:8c:d5:c2:42:03:5a:23:5b:98:6e:
         8f:c4:9c:2c:c1:c2:d9:80:7d:9d:31:57:c1:87:33:98:3c:d8:
         ad:8d:de:40:17:f3:93:0d:b1:f5:ff:bc:75:73:b0:8e:f3:ff:
         7c:30:bd:6d:48:a9:61:7a:5e:ef:78:ab:70:17:75:ac:b9:fa:
         61:8b:94:de:2d:87:9f:e7:23:4a:8b:db:7f:e6:05:21:a1:0c:
         71:10:4f:c4:ed:2e:88:35:9c:50:d7:61:b6:9f:cf:1a:43:a0:
         1e:04:54:d3:1c:70:be:3d:5e:d2:71:1f:dc:43:9c:86:fa:58:
         06:a2:56:36:50:a1:e7:d0:8a:3d:39:13:a0:fa:6d:96:84:02:
         4b:b6:50:e6:9d:79:5d:fd:16:78:a4:cf:c0:35:70:59:29:41:
         13:df:f5:22:f2:2a:55:ac:b1:4d:06:37:0b:05:16:92:6b:15:
         0a:b3:cd:58:f5:29:2c:7c:56:d7:fe:7f:7a:ca:03:8e:86:bc:
         fd:2c:ce:c5:d8:97:f8:a2:52:07:93:8f:20:6c:ee:88:24:b4:
         d5:ee:55:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:21:03 2026 by rpki-client